rdmsm4x-changelog-20260903-0223-xentropy-vnext-six-host-retirement

Deployed the exact signed feature-rich XEntropy vNext artifact to all six Macs, archived every superseded active/rollback copy without deleting recoverable evidence, and reduced LaunchServices to one canonical XEntropy registration per host.

Scope

• Controller/source/signing host: rdmsm4x.
• Fleet targets: rdmsm4x, rdmbair13m5, rdmbair15m5, rdmpw3265m, rdmpw3275m, and jdmbair13m5.
• Release source: branch codex/xentropy-legacy-cleanup-vnext, commit 9c317b5e74e7701a50cb719b125a947213ce5901, app tree 63a5cd1d6440749ad6ed184a5576bbfd8c60ebdf.

Files and state changed

• Installed ~/Applications/XEntropy.app and ~/.local/bin/xentropyctl on every host.
• Removed the competing /Applications/XEntropy.app from active locations by moving it into each host's owner-only legacy archive.
• Moved 61 superseded installed/rollback objects into six ~/Library/Application Support/XEntropy/LegacyArchive/<run>-9c317b5e74e7 trees with non-launchable .retired entry names.
• Retained one newest rollback generation per host under ~/Library/Application Support/XEntropy/DeploymentRollback/, with its app and CLI entry names changed to .retired while remaining manifest-restorable.
• Unregistered 71 exact noncanonical XEntropy paths and re-registered the six canonical apps; each host now reports exactly one LaunchServices registration.
• Preserved all source, migration, intake, handoff, operations, deployment- recovery, catalog, credential-authority, Keychain, TCC, and local-auth data.
• Copied the six values-free per-host deployment changelogs into the canonical archive at /Users/richh/dev/LLM/Claude/changelogs/.
• Updated the existing xentropy-local skill and installed the validated exact file on all six hosts for both Codex and Claude Code. The skill now rejects archived/recovery/source bundles as runnable copies and preserves current host-local authority boundaries.

Commands and tooling

• scripts/install_xentropy_local_instance_v1.0.zsh built/signed once and installed the same retained artifact host by host.
• scripts/verify_xentropy_fleet_canary_v1.0.zsh verified each installed artifact before and after retirement and again after LaunchServices cleanup.
• scripts/retire_xentropy_legacy_copies_v1.0.zsh produced digest-bound plans, applied them, post-verified them, and exercised canary rollback.
• scripts/retire_xentropy_legacy_fleet_v1.0.zsh enforced pinned host order and identity.
• An owner-only one-shot Aqua launchd job performed the canonical signing step because the background harness could not access the signing identity. It was unloaded after completion.
• An exact-path LaunchServices helper in /Users/richh/dev/_handoff/xentropy-vnext-aqua-install-9c317b5/ unregistered stale paths without deleting files.

Verification evidence

• Source: 272/272 XCTest cases passed; 53 app/UI, 19 gateway, 141 core, and 59 CLI. Both products built, five zsh scripts parsed, and git diff --check passed.
• Installed artifact on all six hosts: version 0.2.0, build 2, bundle ID app.xentropy.XEntropy, strict Apple Development Team ZU2882L4HT, app and CLI architecture x86_64 arm64, exact app executable SHA-256 68083032daaa04a09cf2ec101d694143e447dc97b3af119a23c9e2d7cfd534b2, exact CLI SHA-256 c22321f6a85d6407d226c088906048112029d60bb9e3906ce32b80a2b2f9b9f6, xentropy.catalog.v2 schema 2, saved tyrell-light, and one canonical runtime.
• Final plans account for 67 objects: 61 archived and six retained rollbacks.
• rdmbair15m5 additionally passed retirement rollback, exact prior-deployment restore, preservation of displaced vNext recovery evidence, vNext reinstall from the same release artifact, fresh-plan reapply, and final verification.
• Controller evidence: /Users/richh/dev/_handoff/xentropy-vnext-aqua-install-9c317b5/ and docs/reviews/2026-09-03-xentropy-vnext-fleet-retirement-rollout.md in the isolated XEntropy worktree.
• Agent skill: 12/12 installed surfaces (Codex plus Claude Code on six hosts) verified at SHA-256 0949be9cc07eeb668cf7771339f93e69230f41471e47a00f221153b6e4f5229a; the bundled validator passed.

Recovery / undo

• To undo only legacy retirement, use the exact host's completed plan and scripts/retire_xentropy_legacy_copies_v1.0.zsh --rollback-plan with its recorded digest.
• To restore the prior deployed app, follow docs/runbooks/xentropy-vnext-deployment-recovery.md and use only that host's retained rollback manifest. Never copy rollback or authentication state between Macs.
• Release artifacts remain retained on rdmsm4x for exact vNext reinstall.
• Complete source history through 2f07be994c1e283ac86ece50511733180cd69099 is additionally preserved in owner-only Git bundle /Users/richh/dev/_handoff/xentropy-vnext-aqua-install-9c317b5/xentropy-vnext-source-2f07be9.bundle with SHA-256 bbfc93fb86c4f69f825e182e951f3262cf7e66dfed472fe9c326d98c5e502ae9.
• Canonical main was subsequently fast-forwarded through 2f07be9 and the five-file documentation closeout was committed as fc2bfd58e7ec73e4a35fdc2451652461de0f64ba. All 11 pre-existing AppIcon hashes stayed identical and remain the only dirty paths; no push occurred. Complete canonical history is preserved in owner-only bundle /Users/richh/dev/_handoff/xentropy-vnext-aqua-install-9c317b5/xentropy-vnext-canonical-fc2bfd5.bundle with SHA-256 fca2e3711217ad359d8ede152a95ce7518bd570a9c3ebd27993516dbca58c597.

Outstanding owner actions

• Fast-forward or merge the clean reviewed release branch into canonical XEntropy main while preserving its 11 pre-existing AppIcon edits.
• Publish this and the five remote per-host changelogs to Apple Notes from the appropriate host's logged-in Aqua session. This background session cannot provide AppleEvent publication proof.
• Do not reset TCC or rotate local-auth records merely to remove old-copy state: the bundle identifier is shared and the current records are expected. Any future regrant/rollover requires a separate foreground, exact-target plan.